Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a383030303a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a383030303a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          rXORqaylXg/MFoO27vrZj700TPDisFDO2WfJMoVGon8=
Subject key identifier:   2C:17:23:E5:66:39:CB:E3:A9:E5:94:15:C6:EE:25:B7:6A:D7:F6:DE
Certificate issuer:       /CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
Certificate serial:       54FB067DC4CF23FF0D2800956C985002331EDC01
Authority key identifier: DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a383030303a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Tue 21 Jul 2026 23:04:15 +0000
ROA not before:           Tue 21 Jul 2026 22:59:15 +0000
ROA not after:            Tue 20 Jul 2027 23:04:15 +0000
asID:                     270615
IP address blocks:        2804:6eb8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fb:06:7d:c4:cf:23:ff:0d:28:00:95:6c:98:50:02:33:1e:dc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
        Validity
            Not Before: Jul 21 22:59:15 2026 GMT
            Not After : Jul 20 23:04:15 2027 GMT
        Subject: CN=2C1723E56639CBE3A9E59415C6EE25B76AD7F6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:ec:d3:14:2f:18:51:c3:6b:06:a9:1b:d1:
                    58:46:f8:a1:67:43:3c:70:5e:70:a1:1f:16:70:99:
                    c3:a8:10:c4:1c:82:54:3b:7b:b1:00:ed:c6:1b:7d:
                    c6:4c:76:43:73:d1:b6:9d:8b:65:16:ab:28:e9:50:
                    d5:a5:1e:0c:e9:7a:27:8f:b6:33:9a:af:a5:59:b6:
                    37:22:0f:f5:e6:40:86:cb:d0:5a:03:0d:a6:c3:3c:
                    f4:fa:55:2d:70:64:46:45:fd:d0:5b:20:97:8f:95:
                    55:91:13:7b:11:43:ef:1f:4c:c5:33:30:97:74:f5:
                    fd:99:c2:47:8d:21:d2:dd:d7:1e:12:b8:db:44:9b:
                    ce:20:66:c2:c9:4b:77:e1:b6:97:98:b1:46:94:d5:
                    bb:31:de:87:2c:f0:41:0c:7b:37:33:0a:7c:13:3f:
                    c4:ff:4b:f5:35:cd:56:f4:77:19:1c:9e:13:a8:d9:
                    dc:0e:4b:64:b7:76:81:dc:f9:90:af:34:27:04:59:
                    5f:b0:8d:0f:e2:1d:e8:e3:d3:c0:67:d1:e6:7c:a0:
                    72:10:a2:b8:79:5c:5f:45:2d:a2:d9:2a:45:3f:f5:
                    fd:ce:d7:ed:ba:84:b6:72:59:e0:90:7d:3b:90:e1:
                    5c:f7:6e:21:c4:45:3a:11:aa:32:dd:b9:fe:7a:2b:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:23:E5:66:39:CB:E3:A9:E5:94:15:C6:EE:25:B7:6A:D7:F6:DE
            X509v3 Authority Key Identifier:
                keyid:DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a383030303a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:84:2a:5c:a0:f3:f4:0f:62:af:d6:f3:2d:fc:25:34:b8:ce:
         d4:71:1a:83:39:e2:72:c0:8c:dd:1b:7b:f7:27:bb:91:3a:26:
         81:ee:4f:35:47:47:dc:35:30:6f:9a:ff:2b:64:7b:76:fe:13:
         70:6a:a9:54:86:d6:f0:a8:e6:34:ed:02:a4:11:97:9e:b6:67:
         2e:01:b0:e0:cd:38:2c:50:aa:9e:0d:ef:c1:5e:4b:2b:b8:00:
         49:4b:33:70:01:0f:2b:7c:ad:cf:26:45:df:7a:f7:e2:0c:38:
         17:66:8d:50:e0:0a:e4:3c:0d:35:5d:74:47:bd:a0:4c:27:39:
         d1:7b:a2:9a:16:e8:35:40:e7:f4:24:69:05:32:7c:8e:8e:90:
         94:4b:f4:ed:d4:ec:70:dd:c3:8b:26:74:a5:c9:4d:d7:45:86:
         bd:9a:98:ab:bf:50:3b:a4:ed:a4:cc:68:d6:39:51:ae:51:68:
         3d:8d:4e:89:6a:63:05:fd:83:fc:cd:34:7f:af:ad:4c:5d:fe:
         9e:40:89:0d:ab:02:05:c5:f3:b2:a0:c2:8c:0d:32:e6:1b:76:
         ae:1d:c2:a0:62:85:af:12:5f:a4:29:a4:4e:57:11:a3:c4:03:
         5b:fa:2e:09:80:ee:51:2b:53:a5:00:1d:1a:cd:ff:c2:f9:c5:
         56:34:f8:30
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVPsGfcTPI/8NKACVbJhQAjMe3AEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4NTQ2OTk4MUQ2MkY5QUJFRTcwMTk1M0VDM0JFNzRG
NEQ2RTYzODAeFw0yNjA3MjEyMjU5MTVaFw0yNzA3MjAyMzA0MTVaMDMxMTAvBgNV
BAMTKDJDMTcyM0U1NjYzOUNCRTNBOUU1OTQxNUM2RUUyNUI3NkFEN0Y2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMm+zTFC8YUcNrBqkb0VhG+KFn
QzxwXnChHxZwmcOoEMQcglQ7e7EA7cYbfcZMdkNz0badi2UWqyjpUNWlHgzpeieP
tjOar6VZtjciD/XmQIbL0FoDDabDPPT6VS1wZEZF/dBbIJePlVWRE3sRQ+8fTMUz
MJd09f2ZwkeNIdLd1x4SuNtEm84gZsLJS3fhtpeYsUaU1bsx3ocs8EEMezczCnwT
P8T/S/U1zVb0dxkcnhOo2dwOS2S3doHc+ZCvNCcEWV+wjQ/iHejj08Bn0eZ8oHIQ
orh5XF9FLaLZKkU/9f3O1+26hLZyWeCQfTuQ4Vz3biHERToRqjLduf56K4pnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULBcj5WY5y+Op5ZQVxu4lt2rX9t4wHwYDVR0j
BBgwFoAU24VGmYHWL5q+5wGVPsO+dPTW5jgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRQMjJ6QTlZMmdqcmg0WGJVVFJFenF1aEREY0dVY05iQnJIQ0M2amNy
cjYvMC9EQjg1NDY5OTgxRDYyRjlBQkVFNzAxOTUzRUMzQkU3NEY0RDZFNjM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODU0Njk5ODFENjJGOUFC
RUU3MDE5NTNFQzNCRTc0RjRENkU2MzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkUDIyekE5WTJnanJoNFhiVVRSRXpxdWhERGNHVWNOYkJySENDNmpjcnI2LzAv
MzIzODMwMzQzYTM2NjU2MjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM2MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbriAMA0GCSqGSIb3DQEBCwUA
A4IBAQBghCpcoPP0D2Kv1vMt/CU0uM7UcRqDOeJywIzdG3v3J7uROiaB7k81R0fc
NTBvmv8rZHt2/hNwaqlUhtbwqOY07QKkEZeetmcuAbDgzTgsUKqeDe/BXksruABJ
SzNwAQ8rfK3PJkXfevfiDDgXZo1Q4ArkPA01XXRHvaBMJznRe6KaFug1QOf0JGkF
MnyOjpCUS/Tt1Oxw3cOLJnSlyU3XRYa9mpirv1A7pO2kzGjWOVGuUWg9jU6JamMF
/YP8zTR/r61MXf6eQIkNqwIFxfOyoMKMDTLmG3auHcKgYoWvEl+kKaROVxGjxANb
+i4JgO5RK1OlAB0azf/C+cVWNPgw
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:18:59 2026 by rpki-client